Cisco :: Ikev1 ASA 8.4 VPN Connects But Doesn't Pass Traffic
May 2, 2011I setup the ikev1 client and can connect but I can't pass traffic either way. I have tried icmp, port 80, smb etc... here is my config: ........
View 9 Replies
ADVERTISEMENT
Cisco :: VPN Connects But Can't Pass Traffic?
Apr 29, 2011A former coworker of mine setup VPN capabilities to our office network shortly before he left. It is no longer working. We can connect to VPN but I'm not able to ping any devices on the remote network or Remote Desktop to any of the server. After 30 minutes, the VPN connection drops. I have attached our ASA 5505 config to assist in troubleshooting.
View 3 Replies View RelatedCisco VPN :: ASA 5510 - Anyconnect Connects But Won't Pass Traffic?
Aug 11, 2011I am trying to use a ASA 5510 with AnyConnect as an in-line SSL VPN device. I have a separate firewall that NAT's 443 to the inside IP of the ASA, which is the only configured interface on the ASA. I can connect to the ASA from the WAN just fine and the AnyConnect client connects just fine, I get an IP lease across the VPN on my LAN, all looks well. The problem is that I cannot pass any traffic. The only device on my LAN that I can ping is the ASA, nothing else including the default gateway is accessibe. I have setup a static route on the ASA pointing 0.0.0.0 0.0.0.0 to the LAN gateway, but no dice.
View 1 Replies View RelatedCisco Firewall :: ASA5505 Connects Through Lan But Cannot Pass Traffic
Sep 13, 2011We have an issue where by we connect to various customers and the Cisco IPSEC remote access works fine from our LAN through an ASA5505 to a customer site.We have 1 customer that we have some issues with. We can connect from the LAN through to the customers VPN, authenticate and establish a tunnel but in we cannot pass traffic. When we try from outside of the office on a public internet connection the VPN works fine. What could cause this issue?
View 3 Replies View RelatedCisco VPN :: ASA 5520 / VPN Phase 2 Complete But LAN Traffic Doesn't Pass
Aug 6, 2011Just setup a site to site vpn between 2 ASA 5520 Firewalls in two locations but vpn doesn't work even though i see phase 2 completed on the logs. I can't ping across the LANs.
View 2 Replies View RelatedCisco Firewall :: 5505 Transparent Mode Doesn't Pass Traffic
Dec 4, 2012asa 5505 do not pass traffic as a patch cord, how to make it pass traffic? [code]
View 2 Replies View RelatedCisco WAN :: 1921 Won't Pass Traffic?
Jul 9, 2011I can telnet to the router and ping places on the inside and outside. However when I connect a laptop to the inside interface I can ping to the outside for a bit but can't open a web page and then connectivity is gone all together. At first I thought it was a NAT issue but I know I am good on that front. I have attempted to change the speeds and duplex settings on the outside interface but it does not seem to work. Again if I take the cable from the outside interface and plug it into a laptop it works fine. The thing that makes me wonder is why can I connect to the outside interface and configure it just fine?
View 4 Replies View RelatedPublic IP Goes To Router Which Doesn't Pass On Requests To Server
May 24, 2012I'm having some trouble with my P660RU-T1 configuration. I have recently set up a linux SFTP server at my home and am trying to access it via my public ip (eg 1.1.1.1), the problem is this public IP goes to the router which doesnt pass on the requests to the server.Last summer when i first messed around with this i had no problems with using the public ip to access the server, its only recently.
View 1 Replies View RelatedCisco Firewall :: ASA5505 Does Not Pass Traffic
Jan 25, 2013I used the GUI configuration tool for this ASA 5505. When I install it no traffic passes. I am wondering to verify my config. I have masked the usernames for VPN with xxxxxx and yyyyyy. [code]
View 6 Replies View RelatedCisco WAN :: 877 Pass PPPOE Traffic To Another Router?
Jan 7, 2011A PC connected to a Cisco 877 router and 877 router is connected to another router (7301) via GRE tunnel,Cisco 7301 router is a NAS server and is being used as a PPPOE server.If user create a PPPOE connection on his computer and dial with a username/pass we want to send the PPPOE traffic to 7301 router, so 877 router should pass the PPPOE traffic to 7301 and user will be able to connect,User -> 877 -> 7301(PPPOE server).
View 4 Replies View RelatedCisco Firewall :: ASA5505 Will Not Pass Traffic?
Nov 15, 2011I am trying to setup my very first ASA5505 and I cannot get it to pass traffic from the inside to the outside. I am not using NAT/PAT. Here is what I have done so far.
ASA5505(config)# interface Vlan 1ASA5505(config-if)# nameif insideASA5505(config-if)# security-level 100ASA5505(config-if)# ip address 33.46.132.34 255.255.255.248ASA5505(config-if)# no shut
[Code]....
Then from the asdm I permited everything from inside to go out but I cannot get any traffic through. I can ping the outside if I source the outside interface but not if I source the inside. The logs would not show me anything.
I did a packet tracer and it indicates the implicit deny rule at the end of the access-list is stopping my traffic eventhough I have allow rules above it?
I also checked the box in the asdm to allow traffic to pass without NAT
Cisco Firewall :: PPTP Traffic Cannot Pass Through PIX 525 7.0(7)
May 6, 2008i read cisco document:[URL] pptp client is in inside,pptp server is in outside.when i donot use firewall, the pptp connection can establish successfully.but use pix 525 7.0(7) i config:
inspect pptp.
pptp connection cannot setup.
show connection in pix:
pptp tcp 1723 is ok.
gre connection only one "E" flag, E means 'outside back connection'.i try second method:delete 'inspect pptp',permit tcp 1723 and gre traffic from outside to inside, and i have config static nat,but the pptp connection cannot work too.so i think there is a pptp bug exist in pix 7.0(7).
Cisco Switching/Routing :: Catalyst 3650 Doesn't Pass Voice?
May 22, 2013|_voip PBX___|-----|__3650___|------fiber-------------|__3650_____|------|_voipphone__| I have a case where voipphone is registered on the voippbx but peaple on both end can't hear each other . No ACL on both 3650 , no firewalls between them , distance is about 2 miles . I tried to make telnet x.x.x.x 1720 or 1719 or 1721 (h323 ports) to opposite switch -connection refused . How can test if ports are open on the 3650 ? Is it coorect If I create allowing acl and apply it on both 3650 on the interfaces connected one switch to voippbx "IN" , second switch on the interf connected to voipphone "IN" ?
View 3 Replies View RelatedCisco WAN :: 7206 VXR Configuration To Pass MPLS Traffic?
May 28, 2013I have a 7206 VXR router between a several Mikrotik routers on our backbone. We have the Mikrotiks on both sides of the CIsco 7206VXR setup for MPLS/VPLS. I need to simply setup the 7206 to pass the MPLS/VPLS tagged packets to the next router on the link. We are using OSPF as the routing protocol. I am told by our Mikrotik guy that I just need to enable LDP and VPLS tunnels 4:0 on the 2 gig interfaces on the 7206VXR to let it pass the MPLS/VPLS traffic. It sounds simple but I'm not sure how to do this.
Any commands I need to imput to allow this router to pass this MPLS/VPLS traffic.
Cisco VPN :: 5520 - How Much Traffic Pass Through Into IPSec In ASA Firewall
Mar 20, 2013How can I see the quantity of traffic that is passing through into an IPSec VPN in a ASA 5520.
View 3 Replies View RelatedCisco WAN :: 3825 Router Interface Does Not Pass Traffic
Mar 7, 2012we have a Cisco 3825 router which does not work well with a DSL modem(ISP provided). I have configured the Gi0/0 port of the router to plug into this DSL modem but it does not ping to the ISP gateway. If we do a shut/no shut on the interface then it work fine for about 30 secs. Sometimes even for 1 hr. Then the packets drop and we cannot pass any traffic through this interface.
Now, if the ISP connection is terminated on a computer it works fine. It works fine without dropping any packet.I have tried various options like using a straight/cross cable. I have tried to configure the interface negotiation for 100/full, 100/half, auto/auto and almost all the options.I have also tried to interconnect the devices using a L2 device like a HUB. Nothing works.
Cisco VPN :: 3900 / How To Ensure All VPN Traffic Will Pass Through Router
Jan 11, 2013I recently upgraded from a Cisco 3900 series router to a Cisco ASR1k router. Since the upgrade, I have internal clients who claim they cannot connect to external VPNs. These internal clients are behind a NAT that routes a public IP address to a group of clients with private IP addresses.
How can I ensure that all VPN traffic is able to pass through the NAT?
Cisco VPN :: 2811 - SSL VPN Services / Cannot Pass Traffic To Internet
Jan 17, 2013[OK] Site to Site IPSec + GRE = success, no problems.
[OK] IPSec remote access = success, no problems.
[NO] SSL VPN = remote users can successfully connect to all internal systems. Cannot pass traffic to the Internet.
Hardware:
Cisco 2811, Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(22)T5, RELEASE SOFTWARE (fc3) . Software: Cisco Any Connect Secure Mobility Version 3.1.01065
Single hub router terminating IPSec+GRE site to site, IPSec remote access, and SSLVPN remote access VPN services. All services currently configured and running successfully with the exception of the SSLVPN service. Remote users can initiate and successfully establish SSL VPN sessions. While established, connectivity to all internal systems/resources are successful. Only when the remote access client tries to connect to "Outside" Internet resources does traffic not pass successfully. Troubleshooting has pointed to a NAT related issue (I believe).
When connecting from a remote access workstation, utilizing IPSec remote access client (built-in Cisco IPSec client from Mac OS), the session establishes and the client works flawlessly. Examining the Cisco 2811 router, you see the /32 host route from the remote access session get installed, and you see the corresponding NAT translation entries created when the client accesses outside (Internet) resources. Appropriate configuration to implement "hair pinning" have been included to handle the in and right back out (with NAT translation) needed for remote clients to access the Internet.
Configured the 2811 for SSL VPN, and remote access clients can successfully connect and access all internal network resources. Examining the Cisco 2811, the /32 host route for the remote access client is installed, pointing to SSLVPN-VIF0 interface with a next hop of 0.0.0.0 When checking the NAT translation table, there are NO entries for the remote access client address created which leads me to believe the hair pinning/NAT function is not being invoked for SSLVPN clients.
Originally, the IPSec remote access VPN local pool was 10.0.100.0 /24. To keep from having to adjust the existing NAT translation, PBR Route-MAP for the hair pinning function - I took the 10.0.100./24 and broke it into a pair of /25 networks. Bottom half for the IPSec remote access VPN pool (10.0.100.0 /25); upper half for the SSL VPN pool (10.0.100.128 /25). By utilizing SSL VPN, is the traffic somehow bypassing the DIALER1 interface where both the crypto map (and more importantly: IP NAT OUTSIDE, and PBR configuration for the hair pinning function)? I cant explain why NAT translation entries are not being created for SSLVPN client sessions.
Cisco 2811 Configuration has been included. IPSec & SSL VPN Remote Access Sessions Captures (performed from same remote client) have been included.
Cisco WAN :: 1941 Router Not Pass Traffic From Window 7 Computers
Jul 14, 2011I cannot telent to 1941 router from a Window 7 PC and I can a Window XP PC. Telnet is enabled on Win 7 PC. I upgraded 1941 to latest IOS.Compters running Windows XP can telnet to router and hit the internet. Computers running Windows 7 cannot hit the internet. I replaced the 1941 with a 1760 router and Win 7 computers can telnet to router and hit the internet. I used the same config from the 1941 on the 1760.
View 5 Replies View RelatedCisco Firewall :: Allowing Multicast Traffic To Pass Through ASA5510
Mar 1, 2011I ' m not able to configure the asa 5510 to allow the multicast traffic to pass through ASA.The multicast traffic have to pass from inside interface to outside interface.Can I configure the multicast traffic to pass through asa with a static nat ?
View 1 Replies View RelatedCisco Firewall :: 5520 To Pass Traffic Through Ssm 20 And To Create Sensors
Jun 20, 2011I have installed asa 5520 , software ver is 8.4,I have SSM-20 installed in asa 5520. How to pass traffic through this ssm-20 ,how to create sensors,how to update signatures of this IPS module ,is there any procedure to automatically update the signatures .
View 1 Replies View RelatedCisco WAN :: 881-K9 - Unable To Pass DHCP Or Other Traffic Through L2tp Tunnel
Dec 14, 2011we have two routers CISCO881-K9 and we have established l2tpv3 pesuduwire between two routers: attached the configuration file for both routers.
Although the l2tp established but we are unable to pass the DHCP or other traffic through l2tp tunnel from router A to router- B. [code]
Cisco Firewall :: Pass Management VLAN Traffic Through ASA 5510 In Transparent
Mar 10, 2013We have a small cisco 1800 series workgroup router that seperates our network from the outside world. The data coming into our network goes into the router on interface fa0/1 and comes out on interface fa0/0. fa0/0 is split into 2 sub-interfaces (fa0/0.2 and 0/0.3). These sub-interfaces correspond to a desktop and server vlan on our network. The workgroup router is connected to a 3560G trunk port (we'll call it switch 1) and switch 1 connects to another 3560G (we'll call it switch 2). Recently I was asked to add another layer of security to our network by installing an ASA 5510 firewall and forcing certain types of traffic to authenticate using their domain credentials for our network. The firewall was set up between the router and switch 1 in transparent, multi-context mode. There are 2 security contexts, 1 for the desktop vlan and 1 for the server. Both have the same security settings applied to them since we want the same behavior regardless of whether they are trying to access the servers or the workstations.
View 2 Replies View RelatedCisco Switching/Routing :: ASA 5520 - Can't Ping / Pass Traffic Through Interfaces
Apr 17, 2012I've just started a CCNA course and my lack of knowledge has me a bit stuck. My network is comprised of Cisco components and I'm semi familiar with them just from reading and looking through options. I currently am using a Cisco ASA 5520 on my network and I am trying to join another network via one of the interfaces. My network is 192.168.0.0 255.255.0.0 and my inside interface is 192.168.1.1 255.255.0.0. I enabled a second interface using a static ip of 10.0.0.1 with a subnet of 255.255.255.128. Connected to that interface, I have a Fortigate firewall at 10.0.0.2 255.255.255.128. I can ping just fine from the Fortigate network to the 10.0.0.1 interface on the Cisco ASA 5520 network, but I can not ping the 10.0.0.1 interface (or anything past it) on the ASA 5520 from any computer on the Cisco network. I've read that ACL's and NAT have to be done as well as enabling traffic between interfaces with the same security levels. (both interfaces have security levels of 100 and the option is checked to allow traffic).
Note: each network has it's own internet connection. The connection is to share information on servers on both networks with each other.
Cisco Firewall :: ASA 5510 Users Are Unable To Pass Traffic When Connected Through Vpn
Sep 12, 2011I am migrating over from and old PIX to an ASA 5510. After configuring the new device everything else is functional (Internet) but users are unable to pass traffic when connected through the vpn, they are able to authenticate and I see their session connected on the ASDM but no data is passed..[code]
View 4 Replies View RelatedBelkin Routers :: F9K1106 Stops Responding / Won't Pass Any Traffic
Feb 9, 2013I run a AirPort Extreme router. I have my F9K1106 range extender set up and working. works awesome. I get home from work the next day and the range extender seems to fall asleep , it won't pass any traffic. I power cycle it and its back up and running. this happens everyday no fail for a week now.
View 1 Replies View RelatedCisco Wireless :: 1131AG Can't Pass Traffic When In Centrally Switched Wlan Using VWLC
Sep 9, 2012Im using 1131AG AP.Locally switched WLAN don't have problem.Authentication used: open/wpa-psk/wpa2-psk.Pinging the IP Address of the vWLC dynamic interface (WLAN-SSID Mapping) is ok, but with the gateway failed.
View 12 Replies View RelatedCisco VPN :: ASA 5500 - Restored Failed Unit Now Unable To Pass Traffic Over VPN Tunnels
Nov 11, 2012I restored the HA pair back to Active/Standby.
1 remaining issue.
I have 3 IPsec Site-to_SIte tunnels.
I noticed that when the NEW UNIT becomes ACTIVE that I am unable to pass traffic over the VPN tunnels.When I failback I am able to pass traffic.
Wired Connects Wireless Doesn't
Jul 28, 2011I have my pc connected to the internet with a cat5 and i can connect fine to the internet. My dads pc which is connecting to the same modem thru wireless card is saying its connected but is not able to load any websites. I have reconnected, restarted the pc and restarted the dns service but havent got anywhere with it.
View 2 Replies View RelatedComputer Connects To Router But Doesn't Get Internet?
Apr 25, 2011Just purchased a new computer. Old one has a Lynksis wireless router. Tried to connect the old one and can't get internet.
View 1 Replies View RelatedLaptop Connects To Wireless Router / WPA Doesn't Work
Sep 3, 2012I'm having an issue connecting to my wireless router. I can connect fine with security disabled, but it doesn't connect if I enable WPA. It says there's a "timeout" issue when I try to connect with WPA enabled.No one else is having issues connecting with their laptops and smartphones, so it must be a problem with my computer. [code]
View 5 Replies View RelatedWireless Internet Connects But Doesn't Transfer Packets
Nov 30, 2011As the topic states, the wireless card finds the signal without issues, but then does not transfer any packets after it connects. Only one computer is having this issue, all others connect perfectly fine. Also, there was no significant change to the computer recently, the problem seems to have sprung about randomly.
[code]...
Home Network :: Wireless Connects But Doesn't Browse
Feb 12, 2011My laptop is able to connect to the wireless router in my home, but the browser will never load a page, status is shown "connected". However, when I try on other laptops, they are able to surf the net. I have tried using my laptop at my friend's place with a different wireless router and it works at his place as I was able to surf the internet through my wireless! So, I've tried resetting my personal modem to factory default and it still doesn't work.
View 15 Replies View Related